/*
XPTracker - Alternative Agile Tracking Tool
Copyright (C) 2006-2009  Stephen Starkey

This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA
*/
package org.xptracker.services;

import com.google.inject.Inject;
import net.sourceforge.stripes.action.ActionBeanContext;
import net.sourceforge.stripes.security.controller.StripesSecurityManager;
import org.xptracker.domain.CurrentUserProvider;
import org.xptracker.domain.Role;
import org.xptracker.domain.User;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.util.List;

public class XpSecurityManager implements StripesSecurityManager {
  @SuppressWarnings({"UnusedDeclaration"})
  @Inject
  private CurrentUserProvider currentUserProvider;

  public boolean isUserInRole(List<String> roles, ActionBeanContext context) {
    return isUserInRole(roles, context.getRequest(), context.getResponse());
  }

  public boolean isUserInRole(List<String> roles, HttpServletRequest request, HttpServletResponse response) {
    User user = currentUserProvider.getCurrentUser();
    return isUserInRole(request, user, roles);
  }

  public boolean isUserInRole(HttpServletRequest request, User user, List<String> roles) {
    if (user.hasRole(Role.admin)) {
      return true;
    }

    for (String roleStr : roles) {
      if (user.hasRole(Role.valueOf(roleStr))) {
        return true;
      }
    }

    return false;
  }
}
